REMARKS 

In the Office Action, the Examiner issued a final rejection of Claims 1-19, which 
were all of the then pending claims, under 35 U.S.C. 102 or 103. In particular. Claims 1-12 and 19 
were rejected under 35 U.S.C. 102 based upon an alleged public use or sale of the invention; and 
Claims 13 and 15-18 were rejected under 35 U.S.C. 102 as being anticipated by a Linux Journal 
article "P-Synch." hi addition, Claims 1-12, 14 and 19 were rejected under 35 U.S.C. 103 as being 
unpatentable over the "P-synch" article in view of another article "SPM: System for Password 
Managemenf ' (Cooper). 

Applicants are filing herewith a Request for Continued Examination (RCE) to 
continue the prosecution of the application. This Amendment is being submitted to amend tiie 
independent Claims 1, 7 and 13 to better define the subject matters of these claims. In addition, 
new Clahn 20, which is dependent firom Claim 7, is being added to describe preferred op optional 
features of the preferred embodiment of the invention. Also, the rejection of Claims 1-12 and 19 
based on an alleged public use or sale of the present invention is respectfully traversed. 

For the reasons presented below, Claims 1-20 patentably distinguish over the prior 
art and are allowable; and the Examiner is respectfully asked to reconsider and to withdraw the 
above-identified rejections of Claims 1-19 under 35 U.S.C. 102 and 103, and to allow Claims 1-20. 

The rejection of Claims 1-12 and 19 based on an alleged public use or sale of the 
invention is respectfiilly traversed because the document cited by the Examiner m support of this 
rejection does not establish that the present invention was on sale or in public use prior to October 
7, 2002, which is one year prior to the filing date of the present application. 

The document cited by the Examiner is titied 'T-Synch Installation and 
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configuration Guide," and the first page of the document bears the date "May 2002". The second 
and subsequent pages of this document have a copyright date of 2004. 

This document does not establish that the present invention was on sale or in public 
use prior to October 1, 2002, for a number of reasons. First, the document, wliich as mentioned 
above has a copyright date of 2004, does not estabUsh what if anything was actually on sale or in 
public use prior to October 7, 2002. Any actual product lhat might have been on sale or in public 
use, could be different than described in flie document. 

Second, the document, on its face, states that "This document is intentionally 
obsolete. . .". It is not known how the document became "intentionally obsolete." Clearly, though, 
the fact that the document is intentionally obsolete raises serious doubts about whether the 
document in its present form is an accurate description of what, if anything, was on sale or in 
public use prior to October 7, 2002, 

The probative value of the 2004 document cited by the Examiner is simply 
insufficient to provide the basis for a public use or on sale rejection of the claims of the present 
appUcation. 

Accordingly, the Examiner is requested to reconsider and to withdraw the rejection 
of Claims 1-12 and 19 under 35 U.S.C. 102(b) based on an alleged public use or sale of the 
invention. 

In addition to the foregoing, all of Claims 1-20 patentably distinguish over the prior 
art and are allowable because the prior art does not disclose or render obvious the feature of 
storing, in a password management tool or faciHty, the information described in the independent 
Claims 1, 7 and 13. This information includes, for each of a group of applications, a description of 
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the application, a description of the password type for the application, current and previous 
passwords for the application, and a umform resource locator for the application. 

To elaborate, the present invention, generally, relates to a tool and a method to 
maintain and update passwords for a plurality of computer applications, and more specifically, the 
invention relates to managing password changes for those applications. As discussed in detail in 
the present appHcation, today, many people access numerous password-protected applications. As 
a result, these users must remember a number of passwords and user IDs. Over time, many of 
these passwords may be, or may need to be, changed. This, in turn, has a number of disadvantages 
or problems. One disadvantage is that users may spend a considerable amount of time simply 
changing passwords. Another disadvantage is that users may need to remember the procedure for 
changing those passwords. 

The present invention effectively addresses these issues. Generally, this is done by 
providmg an application that allows a person to define in a secure way a multitude of passwords as 
well as what actions they need to take to initiate a password change. More specifically, in 
accordance with one embodiment of the invention, a tool is provided for maintaining passwords. 
This tool comprises storage for a plurality of current passwords for a plurality of respective 
applications, and means for displaying a reminder to change one or more of those passwords. 

A script is provided for simulating keystroke entries, or running an executable 
program, to automatically perform a password change in said respective applications for said 
current passwords of said reminder. In addition, the tool storage also holds considerable 
information about the applications. For example, this storage holds, for each of the group of 
applications, a description of the application, a description of the password type, the current and 
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the previous passwords for the apphcation, and a uniform resource locator for the application. 

The prior art does not disclose or render obvious holding this infbimation in a tool, 
or facility, that manages password changes. 

In particular, the cited 'T-Synch" article describes a password management 
application, referred to as "P-Synch." With this application, a user specifies the password to 
change to, or to reset, and P-Synch runs through its list of targets in the background. An 
administrator defines which machines and applications a user can modify passwords on, as well as 
more advanced options such as password aging. 

As described in the article, "P-Synch" uses either a native API or TELNET to log in 
to each machine or application one at a time, and runs whatever commands are necessary to modify 
the passwords. The user only needs to specify the password to change to (or to reset) an P-Synch, 
as mentioned above, runs through its list of targets in the background. 

The Cooper article describes a password management system referred to as SPM. 
This system provides multiple levels of user verification beyond the normal password verification 
procedure. The Cooper system enables both local and centralized password database management 
and a consistent command interface across multiple platforms and multiple password database 
types. 

Neither of these references, though, discloses or render obvious the feature of 
providing a password management tool or facility with the information that the tool and facility of 
the present invention have - that is, for each of a group of applications, a description of the 
appUcation, a description of the password type for the apphcation, current and previous passwords 
for the application, and a uniform resource locator for the appUcation. 
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The other references of record, including the references cited in Applicants' EDS, 
have been reviewed. These references, whether considered individually or in combination, also do 
not disclose or render obvious this feature of the present invention. 

Providing the password management tool or facility with this information is useful 
because it simplifies communications between the user and the facility. Communications between 
the facility or tool and the user are enhanced without requiring that the tool or facility access some 
other database to obtain information. 

Independent Claims 1, 7 and 13 are being amended to describe this feature. 
Specifically, Claim 1, which is directed to a tool for maintaining passwords, is being amended to 
add the lunitation that the tool provides storage, for each of a plurality of applications, a 
description of the application, a description of the password types for the application, current and 
previous passwords for the application, and a Uniform Resource Locator for the application. 

Claim 7 is drawn to a method for managing passwords to computer applications, 
and Claim 13 is directed to a program storage device. Both of these claims are being amended to 
add the step of storing in a password management facility, for each of a plurality of applications, a 
description of the application, a description of the password types for the application, current and 
previous passwords for the application, and a Uniform Resource Locator for the application. 

The features now described in Claims 1, 7 and 1 3 are of utility because they 
facilitate and enhance communications between the password management tool or facility and the 
user or users. 

In view of the above-discussed differences between Claims 1 , 7 and 13 and the prior 
art, and because of the advantages associated with those differences, it cannot be said that any of 



these claims is anticipated by or is obvious in view of the prior art Thus, Claims 1 , 7 and 1 3 
patentably distinguish over the prior art and are allowable. Claims 2-6 and 19 are dependent from, 
and are allowable with, Claim 1. Likewise, Claims 8-12 and 20 are dependent from Claim 7 and 
are allowable therewith; and Claims 14-18 are dependent from, and are allowable with, Claim 13. 



reconsider and to withdraw Claims 1-12 and 19 were rejected under 35 U.S.C. 102 based upon the 
alleged public use or sale of the invention, and the rejection of Claims 1-12, 14 and 19 under 35 
U.S.C. 103 as being unpatentable over the "P-synch" article in view of the Cooper article "SPM: 
System for Password Management". The Examiner is flirther asked to reconsider and to withdraw 
the rejection of Claims 13 and 15-18 under 35 U.S.C. 102 as bemg anticipated by the Linux 
Journal article "P-Synch," and to allow Claims 1-20. 



would be advantageous to the disposition of this application, the Examiner is asked to telephone 
the undersigned. 



For the reasons discussed above, the Examiner is respectfiilly requested to 



If the Examiner believes that a telephone conference with Applicants' Attorneys 



Respectfully submitted. 




/ohn S. Sensny 
Registration No. 28,757 
Attorney for Applicsmts 



Scully, Scott, Murphy & Presser, P.C. 
400 Garden City Plaza, Suite 300 
Garden City, New York 1 1530 
(516)742-4343 



JSS:gc 
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